On Tue, Oct 31, 2017 at 04:59:37PM -0700, Kees Cook wrote:> A quick look through "#ifdef CONFIG_KAISER" looks like it might be> possible to make this a runtime setting at some point. When doing> KASLR, it was much more useful to make this runtime selectable so that> distro kernels could build the support in, but let users decide if> they wanted to enable it.